CVE-2019-19767

Published: Dec 12, 2019Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 5.4.2

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (26)

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html

Source: cve@mitre.org

https://bugzilla.kernel.org/show_bug.cgi?id=205609

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://bugzilla.kernel.org/show_bug.cgi?id=205707

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.2

Source: cve@mitre.org

Release NotesVendor Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ea99936a1630f51fc3a2d61a58ec4a1c4b7d55a

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/torvalds/linux/commit/4ea99936a1630f51fc3a2d61a58ec4a1c4b7d55a

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20200103-0001/

Source: cve@mitre.org

https://usn.ubuntu.com/4258-1/

Source: cve@mitre.org

https://usn.ubuntu.com/4284-1/

Source: cve@mitre.org

https://usn.ubuntu.com/4287-1/

Source: cve@mitre.org

https://usn.ubuntu.com/4287-2/

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html